CVE-2004-0998 : Format string vulnerability in telnetd-ssl 0.17 and earlier allows remote attack

Format string vulnerability in telnetd-ssl 0.17 and earlier allows remote attackers to execute arbitrary code.

Published 2004-12-23 05:00:00

Updated 2017-07-11 01:30:39

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2004-0998

Telnetd » Telnetd-ssl » Version: 0.17.17 0.1.2 Woody1 Edition
cpe:2.3:a:telnetd:telnetd-ssl:0.17.17_0.1.2:*:woody1:*:*:*:*:*
Matching versions
Telnetd » Telnetd-ssl » Version: 0.17.17 0.1.1
cpe:2.3:a:telnetd:telnetd-ssl:0.17.17_0.1.1:*:*:*:*:*:*:*
Matching versions
Telnetd » Telnetd-ssl » Version: 0.17.17 0.1.2
cpe:2.3:a:telnetd:telnetd-ssl:0.17.17_0.1.2:*:*:*:*:*:*:*
Matching versions
Telnetd » Telnetd » Version: 0.17.18
cpe:2.3:a:telnetd:telnetd:0.17.18:*:*:*:*:*:*:*
Matching versions
Telnetd » Telnetd » Version: 0.17.25
cpe:2.3:a:telnetd:telnetd:0.17.25:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

2.88%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 90 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

http://www.debian.org/security/2004/dsa-616

[SECURITY] [DSA 616-1] New telnetd-ssl packages fix arbitrary code execution
Patch;Vendor Advisory
http://www.kb.cert.org/vuls/id/995038

VU#995038 - Debian Linux Netkit telnetd-ssl contains a format string vulnerability
Patch;Third Party Advisory;US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/18654

Netkit telnetd-ssl format string CVE-2004-0998 Vulnerability Report

Jump to